* htdocs/admin/save_roles.php: fixed SQL injection, yet again